CVE-2026-94089

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 2.01b05

Description A stack-based buffer overflow exists in the Authentication Handler component within the /webfa authentication.cgi endpoint. The issue occurs when the strcpy() function processes the id and password parameters without proper boundary checks. A remote, unauthenticated attacker can send an overly long payload to these parameters to corrupt the stack frame and overwrite the return address, potentially leading to arbitrary code execution with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Disable WAN access to the router web administration portal. Restrict local management access to dedicated, trusted management VLANs. Monitor perimeter logs for unusual POST requests targeting the /webfa authentication.cgi endpoint.